nginx/nginx-gateway-fabric v2.5.0

on GitHub

Below is the auto-generated changelog, which includes all PRs that went into the release.
For a shorter version that highlights only important changes, see CHANGELOG.md.

What's Changed

🚀 Features

• Extend the readiness probe configuration by @ciarams87 in #4673
• Add owner references to gateway resources by @salonichf5 in #4684
• Add support for server_tokens by @salonichf5 in #4817
• Add HTTPCORSFilter support by @dhurley in #4813
• Update Gateway API to 1.5 by @sjberman in #4839
• NGINX Plus: OpenID Connect Support by @sjberman in #4944
• Support multiple targetPorts in InferencePool by @sjberman in #4637
• NGINX Plus: JWT Authentication Support by @sjberman in #4975

🐛 Bug Fixes

• fix: Prevent double-dash in Data Plane Deployment & Service name by @baburciu in #4653
• Reduce irrelevant resource caching by @sjberman in #4680
• Update dnsResolver value type to string by @bjee19 in #4719
• Fix missing ConfigMaps from cache by @sjberman in #4748
• Fix regex location ordering, prefix modifier, and regex anchoring by @sanmeshkakade in #4764
• Fix status updates for long-named Gateways by @sjberman in #4774
• Fix concurrent map writes by @sjberman in #4830
• Fix wildcard detection for listeners with hostnames by @salonichf5 in #4843
• Add gateway name to key when checking for route overlaps by @dhurley in #4855
• Fix policy TargetConflict for unrelated routes by @sjberman in #4899
• Update status conditions for Backend TLS by @sjberman in #4672
• Allow non-SNI requests and fix 421 responses by @sjberman in #4878
• Add validation for duplicate logout, frontchannel and redirect URI by @salonichf5 in #4947
• Fix: do not include $request_uri in proxy_pass for external locations by @oyiz-michael in #4935
• Support v1beta1 ReferenceGrant; add finalizer RBAC by @nginx-bot in #4994

📦 Helm Chart

• Update docs for release 2.4 by @bjee19 in #4700
• Update main docs for release 2.4.1 by @bjee19 in #4755
• Update main docs for 2.4.2 by @sjberman in #4827
• Bump minimum k8s version to v1.31 by @sjberman in #4840
• Only set helm replicas if autoscaling disabled by @sjberman in #4897
• Improve HPA documentation in README chart and add default values by @borjaOrtizLlamas in #4930
• Release 2.5.0 by @github-actions[bot] in #5006

🧪 Tests

• Update Helm release opentelemetry-collector to v0.147.1 by @renovate[bot] in #4665, #4867, #4956
• NFR Test Results for NGF version 2.4.0 (#4660) by @bjee19 in #4693
• Add longevity test workflows by @sjberman in #4713
• If the conformance tests fail, log the NGF and NGINX container logs by @dhurley in #4710
• Update golang Docker tag to v1.26 by @renovate[bot] in #4780, #4781
• Enable running conformance tests from GWAPI main again by @ciarams87 in #4783
• Improve longevity tests by @sjberman in #4769
• Capture NGINX CPU and Memory metrics in Scale tests by @shaun-nx in #4793
• Add retry when getting nginx loadbalancer address by @bjee19 in #4807
• Update docker/dockerfile Docker tag to v1.22 by @renovate[bot] in #4880
• Update dependency golangci/golangci-lint to v2.11.2 by @renovate[bot] in #4821, #4892
• Enable additional 1.5 conformance tests by @sjberman in #4879
• Add small fix to graceful recovery test and refactor to broadcast run function by @bjee19 in #4939
• Update curlimages/curl Docker tag to v8.18.0 by @renovate[bot] in #4951
• Fix conformance profile parsing by @sjberman in #4963
• Increase conformance test timeout by @sjberman in #4986
• NFR Test Results for NGF version 2.5.0 by @nginx-bot in #5015
• Longevity Test Results for NGF version 2.5.0 by @nginx-bot in #5027

📝 Documentation

• NFR pull request into main by @sjberman in #4694
• Fix release pipeline issues by @ciarams87 in #4703
• Restructure auth filter proposal and expand upon JWT sections by @shaun-nx in #4686
• Mark completed proposals as such by @sjberman in #4753
• Add goals and non-goals for OpenID connect by @salonichf5 in #4745
• Update WAF enhancement proposal by @ciarams87 in #4624
• Design for OpenID Connect by @salonichf5 in #4775
• Update NGINX Agent to v3.8.0 by @renovate[bot] in #4799, #4852, #4972
• Update proposal around multiple auth filters by @shaun-nx in #4801
• Update community meeting section of README by @sjberman in #4876
• Update nginx Docker tag to v1.29.6 by @renovate[bot] in #4910
• Update Gateway API version to 1.5.1 by @sjberman in #4937
• Update JWT auth proposal to include new caCertificateRefs field by @dhurley in #4984
• Update NGINX to v1.29.7 by @sjberman in #4987
• Add CHANGELOG note about deprecation by @sjberman in #5026

🔨 Maintenance

• Add cherry pick bot workflow by @sjberman in #4682
• Update openssl-libs package to fix cves by @bjee19 in #4712
• Use PAT for bot workflows by @sjberman in #4724
• Update community support issue number by @ciarams87 in #4726
• Manually build helm operator by @sjberman in #4731
• Update nginx version to 1.29.5 by @bjee19 in #4738
• Ignore ubi patch updates by @ciarams87 in #4744
• Update operator bundle workflow to use PAT for bot workflows by @bjee19 in #4756
• If the resource version is not set in the store, use the k8s client to get the resource version. by @dhurley in #4668
• Run go fix by @sjberman in #4784
• Fix release pipeline publishing by @sjberman in #4898
• Fix NFR workflow input by @sjberman in #4873
• Reduce pipeline complexity by @sjberman in #4905
• Fix NFR scheduled PRs by @sjberman in #4938
• Update operator RBAC and fix script by @nginx-bot in #5001
• Fix NFR input check by @nginx-bot in #5004

⬆️ Dependencies

Other Changes

• Generate operator bundle for v1.2.0 (#4702) by @bjee19 in #4704
• Operator Bundle v1.2.1 by @github-actions[bot] in #4754
• Operator Bundle v1.2.2 by @nginx-bot in #4831
• Increase number of possible TrustedAddresses by @fiksn in #4792

New Contributors

• @sanmeshkakade made their first contribution in #4764
• @fiksn made their first contribution in #4792
• @borjaOrtizLlamas made their first contribution in #4930
• @oyiz-michael made their first contribution in #4935

Full Changelog: v2.4.2...v2.5.0